# An Expired Certificate

An expired certificate: has_expired is true and invalid_reason says "certificate has expired" (it ended in April 2015).

Source: https://docs.deepinfo.com/reference/lookup/ssl/examples/expired/

Last updated: 2026-09-24

---
`GET https://api.deepinfo.com/v1/lookup/ssl?target=expired.badssl.com`

An expired certificate: has_expired is true and invalid_reason says "certificate has expired" (it ended in April 2015).

Example 1 of 4 in **Certificate Problems** · [SSL Certificate Examples](/reference/lookup/ssl/examples/) · endpoint: [SSL](/reference/lookup/ssl/)

Tags: `param` `target` · `value` `expired.badssl.com`

Asks for the certificate of `expired.badssl.com`.

The connection succeeds, but the certificate was valid only from April 9 to April 12, 2015: `has_expired` is `true`, `signature.valid` is `false` and `invalid_reason` is `certificate has expired`. The issuer is a COMODO RSA domain-validation CA.

## Request

| Parameter | In | Value |
|---|---|---|
| `target` | query | `expired.badssl.com` |

```bash
curl 'https://api.deepinfo.com/v1/lookup/ssl?target=expired.badssl.com' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'
```

## Response

### 200 · OK

`Content-Type: application/json` · `ratelimit-limit: 100` · `ratelimit-remaining: 95` · `ratelimit-reset: 4` · `x-ratelimit-limit-minute: 100` · `x-ratelimit-remaining-minute: 95` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a`

```json
{
  "target": "expired.badssl.com",
  "port": 443,
  "check_date": "2026-09-24T07:51:57Z",
  "connection_status": "success",
  "parsed": {
    "version": {
      "name": "v3",
      "value": "2"
    },
    "fingerprint_sha1": "404bbd2f1f4cc2fdeef13aabdd523ef61f1c71f3",
    "fingerprint_sha256": "ba105ce02bac76888ecee47cd4eb7941653e9ac993b61b2eb3dcc82014d21b4f",
    "fingerprint_md5": "67344e61c0431cf1f7257c1d6de7a785",
    "subject": {
      "dn": "CN=*.badssl.com,OU=PositiveSSL Wildcard,OU=Domain Control Validated",
      "common_name": "*.badssl.com",
      "country_name": null,
      "locality": null,
      "organization": null,
      "organizational_unit": "Domain Control Validated",
      "state": null
    },
    "signature": {
      "value": "anrx2v8DB3J4xWahT0ZDDl8UIYx1Gus24B+kEBXs2jMlfDu1CscBOD0n/VjZzOotaTl8vpfvC9YLWOeMf7+zTB3zt5CApjZ8FFvsBy0CPhtbY1sVqwD6HzsZLd/iIxARB35yf+K/twAbmC8sP86FmieMECIIQSuKPoJO/N0hxlZ0cKQ08rFAnitYolkPHUjv6xE+wUqevGVVbcaj79XUls3xrif3pFcUPJRBBXqLoTdH1/V93PrObzGisIzqzBKbIvE0cM99dUqLaCkMHumWqM+wEh9cKu5nL3+9c/NaASIMcPrNRe94XM4N+k7h785ln0cMT7s2RGhWXFZZraqKvA==",
      "self_signed": false,
      "valid": false,
      "valid_chain": true,
      "invalid_reason": "certificate has expired",
      "signature_algorithm": {
        "oid": "1.2.840.113549.1.1.11",
        "name": "sha256"
      }
    },
    "validity": {
      "start": "2015-04-09T00:00:00Z",
      "length": 345599,
      "end": "2015-04-12T23:59:59Z"
    },
    "issuer": {
      "dn": "CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB",
      "common_name": "COMODO RSA Domain Validation Secure Server CA",
      "country_name": "GB",
      "locality": "Salford",
      "organization": "COMODO CA Limited",
      "organizational_unit": null,
      "state": "Greater Manchester"
    },
    "extensions": {
      "key_usage": {
        "digital_signature": true,
        "content_commitment": false,
        "key_agreement": false,
        "data_encipherment": false,
        "key_encipherment": true,
        "key_cert_sign": false,
        "crl_sign": false
      },
      "extended_key_usage": {
        "server_auth": true,
        "client_auth": true
      },
      "basic_constraints": {
        "is_ca": false
      },
      "subject_key_identifier": {
        "digest": "ne7Be4ELOkdpcRh9ETeTvKUbP/s="
      },
      "authority_key_identifier": {
        "key_identifier": "kK9qOpRaC9iQ6hJWc99DtDoo2uc="
      },
      "authority_info_access": {
        "caissuers_urls": "http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt",
        "ocsp_urls": "http://ocsp.comodoca.com"
      },
      "subject_alt_name": {
        "dns_names": [
          "*.badssl.com",
          "badssl.com"
        ]
      },
      "certificate_policies": [
        "1.3.6.1.4.1.6449.1.2.2.7",
        "2.23.140.1.2.1"
      ],
      "crl_distribution_points": [
        "http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl"
      ],
      "signed_certificate_timestamp": [],
      "other_extensions": []
    },
    "serial_number": "99565320202650452861752791156765321481",
    "tbs_fingerprint": "0eb43cbc55fdbdf45e51047d51802c40fe78e4003de50dfdda93a70c4ae57bb8",
    "subject_key_info": {
      "fingerprint": {
        "hash_algorithm_name": "sha256",
        "value": "ba105ce02bac76888ecee47cd4eb7941653e9ac993b61b2eb3dcc82014d21b4f"
      },
      "key_algorithm": {
        "name": "RSA"
      },
      "rsa_public_key": {
        "length": "2048",
        "modulus": "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",
        "exponent": "65537"
      }
    },
    "has_expired": true,
    "fqdn_list": [
      "badssl.com"
    ]
  },
  "certificate": "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",
  "parse_errors": []
}
```

## Related Examples

- [A Self-Signed Certificate](/reference/lookup/ssl/examples/self-signed/)
- [An Untrusted Root](/reference/lookup/ssl/examples/untrusted-root/)
- [A Certificate for Another Host Name](/reference/lookup/ssl/examples/wrong-host/)
- [An Elliptic Curve (ECDSA) Key](/reference/lookup/ssl/examples/ecdsa-key/)
- [Mail Server on Port 465](/reference/lookup/ssl/examples/port-465/)
- [Certificate Served on an IP Address](/reference/lookup/ssl/examples/ip-address/)